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WHAT IS CLAIMED IS: 

1. A function restricting program executed on a computer 
including an input device and a display device, 

said program making, on the basis of security policy 
5 information containing inhibited process designating 
information defined as information for designating some 
processes of which executions are not permitted with respect 
to one or more caption character strings, said computer 
operate as a device that does not execute respective processes 

10 of which executions are not permitted by inhibited process 
designating information contained in the security policy 
information with respect to a caption character string 
coincident with a title character string of the function 
restricting target window in a case where the function 

15 restricting target window defined as a window of which the 
title character string is coincident with any one of caption 
character strings in the security policy information, is 
displayed on said display device. 

20 2. A function restricting program according to claim 1, 

wherein a window of which a title character string contains 
any one of the caption character strings in the security 
policy information, is also dealt with as the function 
restricting target window. 

25 

3. A function restricting program according to claim 1, 
including a function of making said computer, in a case where 
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a plurality of function restricting target windows are 
displayed on said display device, operate as a device that 
does not execute a process of which an execution is not 
permitted by any one piece of inhibited process designating 
5 information, in the security policy information, associated 
with title character strings of these function restricting 
target windows. 

4. An installer creation program making a computer 
10 including an input device and a display device, operate as a 
device comprising: 

security policy information creating means for creating 
security policy information containing inhibited process 
designating information defined as information for designating 
15 some processes of which executions are not permitted with 
respect to one or more caption character strings on the basis 
of information inputted to said input device; and 

installer creating means for creating an installer 
defined as a program by which, upon an execution of this 
20 program, a computer is installed with the security policy 
information created by said security policy information 
creating means and with said function restricting program 
according to claim 1. 

25 5. A program storage medium stored with a function 

restricting program executed on a computer including an input 
device and a display device, 
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said function restricting program making, on the basis 
of security policy information containing inhibited process 
designating information defined as information for designating 
some processes of which executions are not permitted with 
5 respect to one or more caption character strings, said 
computer operate as a device that does not execute respective 
processes of which executions are not permitted by inhibited 
process designating information contained in the security 
policy information with respect to a caption character string 

10 coincident with a title character string of the function 
restricting target window in a case where the function 
restricting target window defined as a window of which the 
title character string is coincident with any one of caption 
character strings in the security policy information, is 

15 displayed on said display device. 

6. A program storage medium stored with a function 
restricting program according to claim 5, wherein said 
function restricting program deals with a window of which a 

20 title character string contains any one of the caption 
character strings in the security policy information, also as 
the function restricting target window. 

7. A program storage medium stored with a function 
25 restricting program according to claim 5, wherein said 

function restricting program includes a function of making 
said computer, in a case where a plurality of function 
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restricting target windows are displayed on said display 
device, operate as a device that does not execute a process of 
which an execution is not permitted by any one piece of 
inhibited process designating information, in the security 
5 policy information, associated with title character strings of 
these function restricting target windows. 

8- A storage medium stored with an installer creation 
program making a computer including an input device and a 

10 display device, operate as a device comprising: 

security policy information creating means for creating 
security policy information containing inhibited process 
designating information defined as information for designating 
some processes of which executions are not permitted with 

15 respect to one or more caption character strings on the basis 
of information inputted to said input device; and 

installer creating means for creating an installer 
defined as a program by which, upon an execution of this 
program, a computer is installed with the security policy 

20 information created by said security policy information 
creating means and with said function restricting program 
according to claim 1. 



